refactor: share common files between images; trim fedora-remote for a VM

- Move Kanidm/flatpak/finalize.d/sshd files to images/shared/{files,repos}
  and have build.sh overlay them for every image.
- fedora-remote: aggressive hardware trim (no firmware, no kernel-modules-extra,
  no non-QEMU guest agents), keep + enable qemu-guest-agent (Proxmox).
- Fixes the missing package-list (release step) for fedora-remote.

images/fedora-remote/upstream-exclude.txt

@@ -1,49 +1,42 @@
-# Packages removed from the cloned upstream manifests at build time.
-#
-# rpm-ostree treats excluding a package that an included manifest declares as a
-# fatal error, so build.sh strips these lines from the upstream package
-# manifests before composing.
-#
-# Target machine: GMKtec NucBox M7
-#   - AMD Ryzen 7 PRO 6850H (Radeon 680M iGPU)   -> amd-gpu-firmware kept
-#   - 2x Intel I226-V Ethernet                    -> kernel driver, no fw pkg
-#   - Intel Wi-Fi 6 AX200                         -> iwlwifi-mvm-firmware kept
-#   - AMD audio (SOF)                             -> alsa-sof-firmware kept
-# No NVIDIA, no Intel GPU/audio, no other wireless vendors, bare metal (no VMs).
+# Aggressive trim for a headless Proxmox VM: there is no physical hardware, so
+# drop all firmware and non-virtio drivers. Keep qemu-guest-agent (Proxmox) and
+# the virtio stack (in the kernel / kernel-modules).
 
-# NVIDIA
-nvidia-gpu-firmware
-
-# Intel GPU / platform / audio (Intel wireless firmware is kept below)
-intel-gpu-firmware
-intel-audio-firmware
-intel-lpmd
-intel-vsc-firmware
-libva-intel-media-driver
-
-# Intel-only CPU tooling (AMD uses amd-ucode-firmware)
-microcode_ctl
-thermald
-
-# Wireless firmware for hardware that is not present
+# All firmware (none is needed under virtio)
+amd-gpu-firmware
+amd-ucode-firmware
+alsa-sof-firmware
 atheros-firmware
 brcmfmac-firmware
+cirrus-audio-firmware
+intel-audio-firmware
+intel-gpu-firmware
+intel-lpmd
+intel-vsc-firmware
+iwlegacy-firmware
+iwlwifi-dvm-firmware
+iwlwifi-mvm-firmware
 libertas-firmware
+linux-firmware
 mt7xxx-firmware
+nvidia-gpu-firmware
 nxpwireless-firmware
 qcom-wwan-firmware
 realtek-firmware
 tiwilink-firmware
-iwlwifi-dvm-firmware
-iwlegacy-firmware
+libva-intel-media-driver
 
-# Audio firmware for other vendors
-cirrus-audio-firmware
+# Extra kernel modules are not needed in a VM
+kernel-modules-extra
 
-# Virtual machine guest agents / drivers
+# x86 platform tools not needed under QEMU/KVM
+mcelog
+microcode_ctl
+thermald
+
+# Guest agents for hypervisors other than the one in use
 hyperv-daemons
 open-vm-tools-desktop
-qemu-guest-agent
 spice-vdagent
 spice-webdavd
 virtualbox-guest-additions